Well, let's try again

I'll put here step-by-step what i'm doing.

I'm logged on as ROOT, ok? Let's go...

service iptables stop

cd /home/files/ipp2p/0.5b

i edited the file to: IKERNEL = -I/usr/src/linux-2.4.20-8/include

IUSER = -I/home/iptables-1.2.7a/include (i have downloaded iptables 1.2.7a sources)

NETFILTER_VERSION = \"1.2.7a\"

rm /lib/iptables/libipt_ipp2p.so

remove regular file? YES

cp libipt_ipp2p.so /lib/iptables/

iptables -m ipp2p --help

returns the help of the mod

/home/files/ipp2p/0.5b

service iptables start

RH-Lokkit-0-50-INPUT all --anywhere anywhere

iptables -t filter -I FORWARD 1 -p tcp -m ipp2p --kazaa -j DROP

DROP tcp -- anywhere anywhere ipp2p v0.5b --kazaa

RH-Lokkit-0-50-INPUT..................

But now KAZAA can't connect - It's working fine...

Maybe i did something wrong, or the general rule --ipp2p isn't working for me.... but i believe that i did something wrong - sorry... anyway, thanks a lot.... Looking forward for IMESH and SOULSEEK support....

Now i have a few questions....

1 - it is stable for me to use the --bit and --apple? Can it crash my box?

2 - When i try to use ipp2p.gz, the shellscript to automatically start an IPP2P setup using two network interfaces, it return the following:

Starting IPP2P ... iptables v1.2.7a: Unknown arg `--restore-mark'
Try `iptables -h' or 'iptables --help' for more information.
iptables v1.2.7a: Unknown arg `--save-mark'
Try `iptables -h' or 'iptables --help' for more information.
iptables v1.2.7a: Unknown arg `--set-class'
Try `iptables -h' or 'iptables --help' for more information.
iptables v1.2.7a: Unknown arg `--set-class'
Try `iptables -h' or 'iptables --help' for more information.
done

3 - Does this shellscript really control the bandwith consuption by the p2p programs?

Why, for exemple, the wondershaper have much more "rules" and details?

----- Original Message -----

Sent: Friday, March 12, 2004 8:25 AM

Subject: Re: [LARTC] IPP2P v0.5 not working and more...

Hi,

I got the time to use an equal setup like yours to test the drop rule.
> NOTHING HAPPENS - Kazaa can download files again....

Well, i grabbed KaZaA lite (K++) today, installed it on my system (wich is
connected to the internet trough a NATing router). IPP2P 0.5b was working
perfectly fine, I used the following rule to test:

iptables -t filter -I FORWARD 1 -p tcp -m ipp2p --kazaa -j DROP

I could not download any more and iptables output looked like this:

Chain FORWARD (policy ACCEPT 31525 packets, 1506K bytes)
pkts bytes target     prot opt in     out     source
destination
   11 4780 DROP       tcp -- *      *       0.0.0.0/0
0.0.0.0/0          ipp2p v0.5b --kazaa

Removing the DROP rule let me download files again. So make sure that
you're insmodding the right ipt_ipp2p.o and that your DROP-rule is in the
appropriate place. I'll look at IMESH and Soulseek tomorrow.

Regards

--
+++ NEU bei GMX und erstmalig in Deutschland: TÜV-geprüfter Virenschutz +++
100% Virenerkennung nach Wildlist. Infos: http://www.gmx.net/virenschutz

_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/

---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.620 / Virus Database: 399 - Release Date: 11/3/2004